1 . A method to facilitate software installation using embedded user credentials, 
comprising: 

Receiving a software installation package at a computer; 
Extracting an installation program from the software installation package; 
Determining if a current user has sufficient privileges to run the installation 
program; 

If the current user does not have sufficient privileges, 

Recovering a set of user credentials that is associated with sufficient 
privileges to run the installation program from the software installation package, 
and 

Authenticating to the computer using the set of user credentials; and 
Running the installation program on the computer. 

2. The method of claim 1, wherein the software installation package includes an agent, 
wherein the agent enforces security policies on the computer. 

3. The method of claim 1, wherein the software installation package includes a plurality 
of sets of user credentials. ? 

4. The method of claim 3, further comprising: 

Recovering a second set of user credentials from the plurality of sets of user 
credentials if the set of user credentials failed during authentication; and 

Authenticating to the computer using the second set of user credentials. 

5. The method of claim 1, wherein the set of user credentials is encrypted. 

6. The method of claim 1, wherein the software installation package is received over a 
network. 

7. The method of claim 1, wherein the software installation package is received on a 
storage medium. 

8. A computer-readable storage medium storing instructions that when executed by a 
computer caus e the c omputer to perform ajnethod to facilitate software installation using 
embedded user credentials, the method comprising: 

Receiving a software installation package at the computer; 
Extracting an installation program from the software installation package; 
Determining if a current user has sufficient privileges to run the installation 
program; 

If the current user does not have sufficient privileges, 

Recovering a set of user credentials that is associated with sufficient 
privileges to run the installation program from the software installation package, 
and 

Authenticating to the computer using the set of user credentials; and 
Running the installation program on the computer. 



9. The computer-readable storage medium of claim 8, wherein the software installation 
package includes an agent, wherein the agent enforces security policies on the computer. 

10. The computer-readable storage medium of claim 8, wherein the software installation 
package includes a plurality of sets of user credentials. 

11. The computer-readable storage medium of claim 10, the method further comprising: 

Recovering a second set of user credentials from the plurality of sets of user 
credentials if the set of user credentials failed during authentication; and 

Authenticating to the computer using the second set of user credentials. 

12. The computer-readable storage medium of claim 8, wherein the set of user credentials 
is encrypted. 

13. The computer-readable storage medium of claim 8, wherein the software installation 
package is received over a network. 

14. The computer-readable storage medium of claim 8, wherein the software installation 
package is received on a storage medium. 

15. An apparatus to facilitate software installation using embedded user credentials, 
comprising: 

A receiving mechanism that is configured to receive a software installation 
package at a computer; 

An extracting mechanism that is configured to extract an installation program 
from the software installation package; 

A determining mechanism that is configured to determine if a current user has 
sufficient privileges to run the installation program; 

A recovering mechanism that is configured to recover a set of user credentials that 
is associated with sufficient privileges to run the installation program from the software 
installation package; 

An authenticating mechanism that is configured to authenticate to the computer 
using the set of user credentials; and 

A software executing mechanism that is configured to run the installation 
program on the computer. 

16. The apparatus of claim 15, wherein the software installation package includes an 
agent, wherein the agent enforces security policies on the computer. 

17. The apparatus of claim 15, wherein the software installation package includes a 
plurality of sets of user credentials. 

18. The apparatus of claim 17, 

Wherein the recovering mechanism is further configured to recover a second set 
of user credentials from the plurality of sets of user credentials if the set of user 
credentials failed during authentication; and 



Wherein the authenticating mechanism is further configured to authenticate to the 
computer using the second set of user credentials. 

19. The apparatus of claim 15, wherein the set of user credentials is encrypted. 

20. The apparatus of claim 15, wherein the software installation package is received over 
a network. 

21. The apparatus of claim 15, wherein the software installation package is received on a 
storage medium. 



